Alerts This Week
Warning Icon 1 700
Alerts This Week
Warning Icon 1 700

Debian 9: DSA-4147-1 Moderate: PolarSSL Remote Code Execution

debian
Calendar Grey March 21, 2018
Debian Logo
Multiple vulnerabilities found in PolarSSL could potentially lead to remote code execution or service disruptions; it is advisable to perform an upgrade.
Several vulnerabilities were discovered in PolarSSL, a lightweight crypto and SSL/TLS library, that allowed a remote attacker to either cause a denial-of-service by application cra...

Summary

For the oldstable distribution (jessie), these problems have been fixed
in version 1.3.9-2.1+deb8u3.

We recommend that you upgrade your polarssl packages.

For the detailed security status of polarssl please refer to
its security tracker page at:

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: polarssl
CVE ID: CVE-2017-18187 CVE-2018-0487 CVE-2018-0488

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here